CVE-2021-39995

Name of the Vulnerable Software and Affected Versions Huawei eCNS280 TD version V100R005C10 Huawei eSE620X vESS versions V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300

Description The issue is related to an out-of-bounds read vulnerability in a function that parses data returned by OpenHpi, which could lead to a denial of service. This function is used in some Huawei products for hardware management.

Recommendations For Huawei eCNS280 TD version V100R005C10, update to a version that fixes the out-of-bounds read vulnerability. For Huawei eSE620X vESS versions V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300, update to a version that fixes the out-of-bounds read vulnerability. As a temporary workaround, consider restricting access to the function that parses data returned by OpenHpi until a patch is available.